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1. A method for digital content access control, comprising: 

determining digital content to be made accessible via a rights locker describing a 

user's access rights for digital content associated with said rights locker; 
determining enrollment authentication data; 

sending a rights locker enrollment request to a rights locker provider, said rights 

locker enrollment request comprising a digital content request and said 

enrollment authentication data; and 
receiving an authenticated rights locker access request in response to said sending, 

said authenticated rights locker access request for subsequent use in accessing 

digital content associated with said rights locker. 

2. The method of claim 1 wherein said digital content request comprises a request for 
initializing said rights locker with rights to specified digital content. 

3. The method of claim 1 wherein said enrollment authentication data comprises: 
rights locker access authentication data for determining what rights, if any, said user 

has to access said rights locker; and 
rights content access authentication data for determining what rights, if any, said user 
has to digital content associated with said rights locker. 
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The method of claim 3 wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 



5. The method of claim 3 wherein said rights content access authentication data 
comprises payment for rights deposited in said rights locker. 

6. The method of claim 1 wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment request for said rights locker, 
said reenrollment key for supplementing or replacing enrollment authentication data 
of said previous enrollment request. 

7. The method of claim 1, further comprising storing at least part of said authenticated 
rights locker access request in a bookmark on said user device. 

8. The method of claim 1 wherein said authenticated rights locker access request is 
embedded in a Web cookie. 

9. The method of claim 1 wherein said authenticated rights locker access request is 
encapsulated in an HTTP Response message. 

10. A method for digital content access control, comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 
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sending said authenticated rights locker access request and said digital content 
specification; 

receiving an authenticated digital content request and a new authenticated rights 

locker access request in response to said sending; 
sending said authenticated digital content request; and 

receiving said digital content in response to said sending said authenticated digital 
content request. 

11. The method of claim 10 wherein 

said method further comprises determining one or more delivery parameters, said 
one or more delivery parameters indicating where said digital content should be 
sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

12. The method of claim 10, further comprising storing at least part of said new 
authenticated rights locker access request in a bookmark on said user device. 

13. The method of claim 10 wherein said new authenticated rights locker access request 
is embedded in a Web cookie. 

14. The method of claim 10 wherein said new authenticated rights locker access request 
is encapsulated in an HTTP Response message. 
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15. A method for digital content access control, comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 

sending said authenticated rights locker access request and said digital content 
specification; 

receiving a new authenticated rights locker access request in response to said 
sending; and 

receiving said digital content in response to said sending. 

16. The method of claim 15 wherein 

said method further comprises determining one or more delivery parameters, said 
one or more delivery parameters indicating where said digital content should be 
sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

17. The method of claim 15, further comprising storing at least part of said new 
authenticated rights locker access request in a bookmark on said user device. 

18. The method of claim 15 wherein said new authenticated rights locker access request 
is embedded in a Web cookie. 

19. The method of claim 15 wherein said new authenticated rights locker access request 
is encapsulated in an HTTP Response message. 
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20. A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for digital content 
access control, the method comprising: 

determining digital content to be made accessible via a rights locker describing a 

user's access rights for digital content associated with said rights locker; 
determining enrollment authentication data; 

sending a rights locker enrollment request to a rights locker provider, said rights 

locker enrollment request comprising a digital content request and said 

enrollment authentication data; and 
receiving an authenticated rights locker access request in response to said sending, 

said authenticated rights locker access request for subsequent use in accessing 

digital content associated with said rights locker. 

21. The program storage device of claim 20 wherein said digital content request 
comprises a request for initializing said rights locker with rights to specified digital 
content. 

22. The program storage device of claim 20 wherein said enrollment authentication data 
comprises: 

rights locker access authentication data for determining what rights, if any, said user 
has to access said rights locker; and 
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rights content access authentication data for determining what rights, if any, said user 
has to digital content associated with said rights locker. 



23. The program storage device of claim 22 wherein said rights locker access 
authentication data comprises payment for use of a rights locker service. 

24. The program storage device of claim 22 wherein said rights content access 
authentication data comprises payment for rights deposited in said rights locker. 

25. The program storage device of claim 20 wherein said enrollment authentication data 
comprises a reenrollment key determined in a previous enrollment request for said 
rights locker, said reenrollment key for supplementing or replacing enrollment 
authentication data of said previous enrollment request. 

26. The program storage device of claim 20, said method further comprising storing at 
least part of said authenticated rights locker access request in a bookmark on said 
user device. 

27. The program storage device of claim 20 wherein said authenticated rights locker 
access request is embedded in a Web cookie. 

28. The program storage device of claim 20 wherein said authenticated rights locker 
access request is encapsulated in an HTTP Response message. 
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29. A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for digital content 
access control, the method comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 

sending said authenticated rights locker access request and said digital content 
specification; 

receiving an authenticated digital content request and a new authenticated rights 

locker access request in response to said sending; 
sending said authenticated digital content request; and 

receiving said digital content in response to said sending said authenticated digital 
content request. 

30. The program storage device of claim 29 wherein 

said method further comprises determining one or more delivery parameters, said 
one or more delivery parameters indicating where said digital content should be 
sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

31. The program storage device of claim 29, said method further comprising storing at 
least part of said new authenticated rights locker access request in a bookmark on 
said user device. 
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32. The program storage device of claim 29 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 

33. The program storage device of claim 29 wherein said new authenticated rights locker 
access request is encapsulated in an HTTP Response message. 

34. A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for digital content 
access control, the method comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 

sending said authenticated rights locker access request and said digital content 
specification; 

receiving a new authenticated rights locker access request in response to said 
sending; and 

receiving said digital content in response to said sending. 

35. The program storage device of claim 34 wherein 

said method further comprises determining one or more delivery parameters, said 
one or more delivery parameters indicating where said digital content should be 
sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 
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36. The program storage device of claim 34, said method further comprising storing at 
least part of said new authenticated rights locker access request in a bookmark on 
said user device. 

The program storage device of claim 34 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 

The program storage device of claim 34 wherein said new authenticated rights locker 
access request is encapsulated in an HTTP Response message. 

39. An apparatus for digital content access control, comprising: 

means for determining digital content to be made accessible via a rights locker 
describing a user's access rights for digital content associated with said rights 
locker; 

means for determining enrollment authentication data; 

means for sending a rights locker enrollment request to a rights locker provider, said 
rights locker enrollment request comprising a digital content request and said 
enrollment authentication data; and 

means for receiving an authenticated rights locker access request in response to said 
sending, said authenticated rights locker access request for subsequent use in 
accessing digital content associated with said rights locker. 



37. 



38. 
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The apparatus of claim 39 wherein said digital content request comprises a request 
for initializing said rights locker with rights to specified digital content. 



41. The apparatus of claim 39 wherein said enrollment authentication data comprises: 
rights locker access authentication data for determining what rights, if any, said user 

has to access said rights locker; and 
rights content access authentication data for determining what rights, if any, said user 
has to digital content associated with said rights locker. 

42. The apparatus of claim 41 wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 

43. The apparatus of claim 41 wherein said rights content access authentication data 
comprises payment for rights deposited in said rights locker. 

44. The apparatus of claim 39 wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment request for said rights locker, 
said reenrollment key for supplementing or replacing enrollment authentication data 
of said previous enrollment request. 

45. The apparatus of claim 39, further comprising means for storing at least part of said 
authenticated rights locker access request in a bookmark on said user device. 
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The apparatus of claim 39 wherein said authenticated rights locker access request is 
embedded in a Web cookie. 



47. The apparatus of claim 39 wherein said authenticated rights locker access request is 
encapsulated in an HTTP Response message. 

48. An apparatus for digital content access control, comprising: 

means for determining a digital content specification and associated authenticated 

rights locker access request; 
means for sending said authenticated rights locker access request and said digital 

content specification; 
means for receiving an authenticated digital content request and a new authenticated 

rights locker access request in response to said sending; 
means for sending said authenticated digital content request; and 
means for receiving said digital content in response to said sending said 

authenticated digital content request. 

49. The apparatus of claim 48 wherein 

said apparatus further comprises means for determining one or more delivery 

parameters, said one or more delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; and 

said means for sending further comprises means for sending said one or more 
delivery parameters. 
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50. The apparatus of claim 48, further comprising means for storing at least part of said 
new authenticated rights locker access request in a bookmark on said user device. 

51. The apparatus of claim 48 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

52. The apparatus of claim 48 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 

53. An apparatus for digital content access control, comprising: 

means for determining a digital content specification and associated authenticated 

rights locker access request; 
means for sending said authenticated rights locker access request and said digital 

content specification; 
means for receiving a new authenticated rights locker access request in response to 

said sending; and 
means for receiving said digital content in response to said sending. 

54. The apparatus of claim 53 wherein 

said apparatus further comprises means for determining one or more delivery 

parameters, said one or more delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; and 
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said means for sending further comprises means for sending said one or more 
delivery parameters. 



55. The apparatus of claim 53, further comprising means for storing at least part of said 
new authenticated rights locker access request in a bookmark on said user device. 

56. The apparatus of claim 53 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

57. The apparatus of claim 53 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 

58. An apparatus for digital content access control, comprising: 
a memory for storing said digital content; and 

a processor configured to: 

determine digital content to be made accessible via a rights locker describing a 

user's access rights for digital content associated with said rights locker; 
determine enrollment authentication data; 

send a rights locker enrollment request to a rights locker provider, said rights 
locker enrollment request comprising a digital content request and said 
enrollment authentication data; and 
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receive an authenticated rights locker access request in response to said sending, 
said authenticated rights locker access request for subsequent use in 
accessing digital content associated with said rights locker. 

59. The apparatus of claim 58 wherein said digital content request comprises a request 
for initializing said rights locker with rights to specified digital content. 

60. The apparatus of claim 58 wherein said enrollment authentication data comprises: 
rights locker access authentication data for determining what rights, if any, said user 

has to access said rights locker; and 
rights content access authentication data for determining what rights, if any, said user 
has to digital content associated with said rights locker. 

61. The apparatus of claim 60 wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 

62. The apparatus of claim 60 wherein said rights content access authentication data 
comprises payment for rights deposited in said rights locker. 

63. The apparatus of claim 58 wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment request for said rights locker, 
said reenrollment key for supplementing or replacing enrollment authentication data 
of said previous enrollment request. 
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64. The apparatus of claim 58 wherein said apparatus comprises a smart card. 

65. The apparatus of claim 64 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

66. The apparatus of claim 64 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology-enabled smart card. 

67. The apparatus of claim 64 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 

68. The apparatus of claim 64 wherein said smart card comprises a WIM (Wireless 
Interface Module). 

69. The apparatus of claim 64 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module). 

70. The apparatus of claim 64 wherein said smart card comprises a UIM (User Identity 
Module). 

71. The apparatus of claim 64 wherein said smart card comprises a R-UIM (Removable 
User Identity Module). 
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72. The apparatus of claim 58 wherein said processor is further configured to store at 
least part of said authenticated rights locker access request in a bookmark on said 
user device. 

73. The apparatus of claim 58 wherein said authenticated rights locker access request is 
embedded in a Web cookie. 

74. The apparatus of claim 58 wherein said authenticated rights locker access request is 
encapsulated in an HTTP Response message. 

75. An apparatus for digital content access control, comprising: 
a memory for storing said digital content; and 

a processor configured to: 

determine a digital content specification and associated authenticated rights locker 
access request; 

send said authenticated rights locker access request and said digital content 
specification; 

receive an authenticated digital content request and a new authenticated rights 

locker access request in response to said sending; 
send said authenticated digital content request; and 

receive said digital content in response to said sending said authenticated digital 
content request. 
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76. The apparatus of claim 75 wherein 

said processor is further configured to determine one or more delivery parameters, 
said one or more delivery parameters indicating where said digital content 
should be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

77. The apparatus of claim 75 wherein said apparatus comprises a smart card. 

78. The apparatus of claim 77 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

79. The apparatus of claim 77 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology-enabled smart card. 

80. The apparatus of claim 77 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 

81. The apparatus of claim 77 wherein said smart card comprises a WIM (Wireless 
Interface Module). 

82. The apparatus of claim 77 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module). 
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83. The apparatus of claim 77 wherein said smart card comprises a UIM (User Identity 
Module). 

84. The apparatus of claim 77 wherein said smart card comprises a R-UIM (Removable 
User Identity Module). 

85. The apparatus of claim 75 wherein said processor is further configured to store at 
least part of said new authenticated rights locker access request in a bookmark on 
said user device. 

86. The apparatus of claim 75 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

87. The apparatus of claim 75 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 

88. An apparatus for digital content access control, comprising: 
a memory for storing said digital content; and 

a processor configured to: 

determine a digital content specification and associated authenticated rights locker 
access request; 
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send said authenticated rights locker access request and said digital content 
specification; 

receive a new authenticated rights locker access request in response to said 
sending; and 

receive said digital content in response to said sending. 

89. The apparatus of claim 88 wherein 

said processor is further configured to determine one or more delivery parameters, 
said one or more delivery parameters indicating where said digital content 
should be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

90. The apparatus of claim 88 wherein said apparatus comprises a smart card. 

91. The apparatus of claim 90 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

92. The apparatus of claim 90 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology-enabled smart card. 

93. The apparatus of claim 90 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 
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The apparatus of claim 90 wherein said smart card comprises a WIM (Wireless 
Interface Module). 



95. The apparatus of claim 90 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module). 

96. The apparatus of claim 90 wherein said smart card comprises a UIM (User Identity 
Module). 

97. The apparatus of claim 90 wherein said smart card comprises a R-UIM (Removable 
User Identity Module). 

98. The apparatus of claim 88 wherein said processor is further configured to store at 
least part of said new authenticated rights locker access request in a bookmark on 
said user device. 

99. The apparatus of claim 88 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

100. The apparatus of claim 88 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 
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